SF  298  MASTER  COPY 


KEEP  THIS  COPY  FOR  REPRODUCTION  PURPOSES 


REPORT  DOCUMENTATION  PAGE 

Form  Approved 

0MB  NO.  0704-0188 

Public  reporting  burcJen  for  this  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources, 
gathering  and  maintaining  the  data  n^ed.  and  completing  and  reviewing  the  collection  of  information.  Send  comment  regarding  this  burden  estimates  or  any  other  aspect  of  this 
collection  of  information,  including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Sen/ices.  Directorate  for  information  Operations  and  Reports.  1215  Jefferson  i 

Davis  Highway.  Suite  1 204.  Arlington.  VA  22202*4302,  and  to  the  Office  of  Management  and  Budget.  Paperwork  Reduction  Project  (0704-01 88).  Washington.  DC  20503. 

1.  AGENCY  USE  ONLY  (Leave  Wank)  2.  REPORT  DATE  3.  REPORT  TYPE  AND  DATES  COVERED 

9/30/98  Final  Report,  6/15/95-6/30/98 

4.  TITLE  AND  SUBTITLE 

Algorithms  for  Image  Compression,  Distributed 
Communication  Networks  and  Distributed  Resource 

A1 1  oration 

5.  FUNDING  NUMBERS 

DAAH04-95-1-0101 

6.  AUTHOR(S) 

Basilis  Gidas 

Sumit  Ghosh 

7.  PERFORMING  ORGANIZATION  NAMES{S)  AND  ADDRESS(ES) 

Brown  University 

Providence,  RI  02912 

8.  PERFORMING  ORGANIZATION 

REPORT  NUMBER 

9.  .SPONSORING  /  MONITORING  AGENCY  NAME(S)  AND  ADDRESS(ES) 

U.S.  Army  Research  Office 

P.O.  Box  12211 

Research  Triangle  Park,  NC  27709-221 1 

10.  SPONSORING  /  MONITORING 

AGENCY  REPORT  NUMBER 

flto 

11.  SUPPLEMENTARY  NOTES 

The  views,  opinions  and/or  findings  contained  in  this  report  are  those  of  the  author(s)  and  should  not  be  construed  as 
an  official  Department  of  the  Army  position,  policy  or  cfecision,  unless  so  designated  by  other  documentation. 

12a.  DISTRIBUTION  /  AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited. 

12  b.  DISTRIBUTION  CODE 

13.  ABSTRACT  (Maximum  200  words) 

During  the  period  of  the  grant,  6/15/95-6/30/98,  we  investigated  problems  in  two 
major  areas:  (i)  Image  Analysis  Tasks,  including  image  Interpretation,  object 
recognition,  and  tracking;  (ii)  Distributed  communication  networks  and  distributed 
resource  allocation.  In  the  former  area,  we  developed  and  explored  three  paradigms: 
hierarchical  compositional  models;  deformable  templates  for  a  host  of  applications 
including  medical  tasks;  and  HMM/ deformable  templates  for  tracking  and  recognition 
of  moving  objects.  In  the  later  area,  we  developed  a  novel  scheme  for  managing 
buffer  overflows;  a  new  framework  for  network  security;  and  a  mathematical  framework 
for  synthesizing  distributed  algorithms. 

jwacqittiairnBmagDa  ,  jvAfi « MA 

19981222  020 

14.  SUBJECT  TERMS 

Object  recognition,  tracking,  context-free-grammars, 
templates,  buffer  management,  ATM  networks,  distrubted 
algorithms . 

15.  NUMBER  IF  PAGES 

11 

16.  PRICE  CODE 

17.  SECURITY  CLASSIFICATION  18.  SECURITY  CLASSIFICATION  19.  SECURITY  CLASSIFICATION 
OR  REPORT  OF  THIS  PAGE  OF  ABSTRACT 

UNCLASSIFIED  UNCLASSIFIED  UNCLASSIFIED 

20.  LIMITATION  OF  ABSTRACT 

UL 

NSN  7540-01-280-5500 


Enclosure  1 


Standard  Form  298  (Rev.  2-89) 
Prescribed  by  ANSI  Sid.  239-18 
298-102 


TITLE 


Algorithms  for  Image  Compression,  Distributed 
Communication  Networks  and  Distributed  Resources 

Allocation 


FINAL  REPORT 

AUTHORS 

Basilis  Gidas  (Professor) 

Sumit  Ghosh  (Professor) 

DATE 

June  15,  1995  -  June  30,  1998 

U.S.  ARMY  RESEARCH  OFFICE 

GRANT  NUMBER 

DAAH04-95-1-0101 


INSTITUTION 

Brown  University 


APPROVED  FOR  PUBLIC  RELEASE; 
DISTRIBUTION  UNLIMITED 


TABLE  OF  CONTENTS 


Summary  of  Research .  1 

1.  Algorithms  for  Image  Analysis  .  1 

•  Compositional  Models  for  Object  Recognition  .  1 

•  Deformable  Templates  .  3 

•  Simulataneous  Tracking  and  Recognition  .  4 

2.  Distributed  Networks  and  Resource  Allocation  .  4 

•  Buffer  Management  in  Networking  . 4 

•  Security  on  Demand  in  ATM  Network  . 5 

•  A  Mathematical  Framework  for  Synthesizing  Disstributed 

Algorithms  . 6 

List  of  Publications  .  8 

List  of  Participants  .  11 


1 


FINAL  REPOTRT 
Summary  of  Research 

Our  research  supported  by  the  ARO/FRI  grant  has  had  several  successes  in  its  two  principal 
lines  of  investigation:  (i)  Algorithms  for  Image  Analysis  Tasks  such  as  image  interpretation,  ob¬ 
ject  recognition,  tracking,  and  image  coding;  (ii)  Networking,  Distributed  Resources  Allocation, 
and  distributed  Algorithms.  The  algorithms  have  been  strongly  motivated  by,  and  have  been 
implemented  on,  real-world  applications.  Below  summarize  some  of  major  contributions. 

1  Algorithms  for  Image  Analysis 

Compositional  Models  for  Object  Recognition:  Objects  in  an  image  present  themselves  in 
a  variety  of  poses,  illumination,  and  states  of  contiguity  and  occlusion.  The  task  of  an  artificial 
vision  system  is  to  segment  and  recognize,  and  the  challenge  is  in  achieving  an  adequate  articula¬ 
tion  of  these  two  operations,  the  former  being  classically  regarded  as  a  low- vision  problem  while 
the  latter  as  a  high-vision  problem.  In  most  real-world  applications,  it  is  impossible  to  perform 
segmentation  in  the  absence  of  high  level  models,  just  as  it  is  impossible  (in  the  presence  of  high 
levels  of  local  ambiguity)  to  recognize  objects  without  segmenting  them  from  the  background 
and  from  each  other.  As  result  invariant  object  recognition  should  be  addressed  within  the 
context  of  hierarchically  structured  models.  We  introduced  a  class  of  such  models  we  call  com¬ 
positional  models.  They  are  based  on  the  observation  that  objects  can  be  decomposed  into  parts 
which,  in  turn,  can  be  further  decomposed  recursively  into  still  smaller  components,  thereby 
obtaining  a  hierarchy  of  entities,  e.g.  discontinuities,  contours,  strokes,  surfaces,  cylinders,  and 
,  at  the  highest  levels,  objects  such  as  pieces  of  computers  or  airplanes.  This  recursive  decom¬ 
position,  and  the  understanding  of  the  relation  between  the  parts  and  the  whole  and  how  this 
changes  when  factors  that  determine  object  appearances  vary,  is  the  basis  of  the  compositional 
representation. 

Object  recognition  is  in  some  sense  the  inverse  of  this  process;  starting  from  the  gray-level 
image  data,  local  entities  are  recursively  composed,  subject  to  syntactic  contextual  constraints 
articulated  by  compositional  rules,  to  form  higher  level  constituents,  giving  rise  to  labeled  trees. 
Then  a  probability  distribution  on  the  ensemble  of  all  labeled  trees  is  devised  using  ideas  from 
coding  theory  and  the  MDL  (Minimum-Description-Length)  principle.  The  resulting  probabilis¬ 
tic  system  includes  probabilistic  Context-Free  and  Context-Sensitive  Grammars.  A  global  tree 
typically  has  a  large  number  of  nodes  labeled  by  objects  or  object  components  at  various  levels 
of  the  hierarchy;  while  the  composition  rules  can,  in  principle,  access  aU  the  information  encoded 
at  lower-  levels  of  the  representation,  computations  are  made  practical  by  the  fact  that  at  in 
any  given  application  only  a  judiciously  chosen  subset  of  low-  level  nodes  communicate  with 
higher-level  parts  of  the  representation. 

Compositional  type  procedures  were  developed  for  the  following  three  problems: 

(i)  A  Context-Free-Grammar  (CFG)  type  compositional  procedure  was  developed  in  for 
detecting  multiple  2-D  convex  objects  in  images  where  background  noise  conspires  to  make 
regions  of  high  structure  which  need  to  be  distinguished  from  more  regular  shapes  that  represend 
the  real  objects.  The  procedure  was  succesfuUy  applied  to  the  detection  of  mines  in  shallow  water 
optical  imagery.  The  basic  ingredients  of  the  approach  are  as  follows: 

A  data  model  was  devised  to  assign  a  likelihood  to  the  grey-level  data  collected  in  the 
vicinity  of  an  object.  More  specifically,  given  any  boundary  outhning  a  simly  connected  region, 
the  distribution  of  the  data  within  the  boundary  and  within  an  annulus  of  the  surrounding  of  the 
boundary  was  modeled  in  such  a  way  as  to  favor  contrast  between  the  intra-boundary  and  extra¬ 
boundary  pixels.  Additionally,  a  ’’background”  or  "null”  model  was  built  on  the  assumption 
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of  independence  and  homogeinuity  of  the  pixel  grey-levels  regardless  of  the  placement  of  the 
perported  boundary. 

The  goal  of  the  object  dedection  algorithm  was  to  perform  a  proper  hypothesis  test  at 
each  location  in  the  image,  testing  the  hypothesis  ’’location  is  part  of  the  object”  versus  the 
hypothesis  ’’background”. Although  the  test  procedure,  to  be  described  shortly,  could  be  executed 
quite  efficiently,  the  algorithm  was  made  much  faster  by  ’’preprocessing”  the  image  in  order  to 
flag  potential  positions  of  interest.  The  procedure  was  designed  to  produce  multiple  ’’hits”  for 
each  genuine  object,  so  as  to  insure  that  no  object  was  missed. 

The  ’’object  present”  hypothesis  is  highly  compound,  involving  essentially  aU  convex  shapes. 
Shape,  then,  amounts  to  a  nuisance  parameter,  which  calls  for  an  application  of  the  generalized 
likelihood  ratio  test.  This  involves  the  daunting  task  of  evaluating  the  data  likelihood  at  the 
maximum  estimator  of  the  boundary.  Determining  the  most  likely  placement  of  the  boundary, 
under  the  ’’object  present”  hypothesis,  is  thus  the  essential  issue  of  the  detection  algorithm. 

For  this  purpose,  we  devised  CFG  type  compositional  rules  which  generate  convex  shapes 
only:  Consider  two  neighboring  sectors  with  equal  angles  amanating  from  a  location  of  interest 
(a  ’’flagged”  pixel).  Associate  with  each  sector  a  portion  of  the  boundary  of  a  convex  region 
that  contains  the  flegged  pixel.  Allow  theses  sectors  to  join  into  a  larger  sector  provided  that  the 
combined  boundary  is  itself  a  portion  of  a  boundary  of  a  convex  region  containing  the  flagged 
pixel.  The  syntactic  constraint  is  easy  to  work  out,  and  the  recursive  appliaction  of  the  rule 
eventually  creates  a  closed  contour  which  is  necessarily  a  convex  region.  In  fact  all  convex 
regions  can  be  generated  in  this  manner. 

This  representation  of  (digital)  convex  regions  is  equivalent  to  a  CFG,  and  can  be  exploited 
to  exactly  solve  the  problem  of  finding  the  most  likely  convex  boundary  of  a  purpoted  object. 
This  turns  out  to  be  a  dynamic  programming  problem  which  was  solved  by  a  multilevel  (coarse- 
to-fine)  procedure.  The  maximum  likelihood  boundary  replaces  the  nuisance  parameter  and  the 
likelihood  ratio  is  measured.  A  threshold  determines  the  false/missed  detection  tradeoff. 

(ii)  A  prototype  upper-case  handwritten  character  recognition  system  was  developed  based 
upon  a  compositional  hierarchy  with  a  prior  distribution.  The  characters  were  drawn  on  a  pad 
with  a  stylulus  whose  position  was  sampled  at  constant  rate.  The  data  is  simply  the  collection 
of  sampled  locations  (information  about  the  order  of  locations  was  ignored).  A  hierarchical 
representation  was  designed  for  the  objects  in  an  object  library;  the  library  includes  includes 
upper-case  letters,  but  also  numerous  other  ’’objects”  that  emerge  from  intermidiate-level  rep¬ 
resentations,  including  ’’lines”,  ’’arcs”,  ’’T-junctions”,  etc.  The  hierarchy  was  generated  via 
syntactic  rules  under  which  entities  are  composed  to  form  composite  entities.  For  example,  two 
pixels  are  composed  into  a  mini-stroke  (’’linelet”)  if  their  distances  are  below  a  certain  threshol. 
Approximately  fifty  rules  were  used. 

The  probability  disttribution  was  devised  by  exploring  the  MDL  principle.  The  idea  was 
to  encode  an  object  hierarchy  as  if  it  were  to  be  transmitted  over  a  channel  or  stored  on  a 
disk.  A  ’’sensible”  encoding  would  assign  shorter  codes  to  intuitively  succinct  descriptions, 
such  as  nearly  collinear  points  as  a  line  segment  versus  their  description  as  individual  and 
independent  locations.  An  optimal  interpretation  is  an  assignement  of  objects  that  minimize 
the  description  length;  a  greedy  algorithm  was  devised  for  obtaining  an  approximate  solution  of 
this  minimization  problem.  The  performance  of  the  procedure  is  competative  to,  if  not  better 
than,  that  of  commercial  systems. 

(iii)  A  hierarchical/syntactic  system  was  developed  for  recognizing  objects  in  a  small  database 
of  2-D  industrial  tools,  in  images  highly  degrated  by  noise,  blur,  occlusion,  and  overlap.  The 
system  has  three  basic  components:  (a)  An  object  representation  with  two  levels  of  hierarchies. 
The  top  level  views  objects  as  a  concatenation  of  of  its  articulated  joints  and  parts;  it  is  repre- 
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sented  by  a  -graph.  Each  node  in  the  graph  is  associated  with  a  ’’high-level”  object  that  may  be 
a  common  component  of  several  objects;  the  arcs  correspond  to  synctatic  constraints  relating 
the  high-level  componets.  This  top  level  can  be  expressed  as  a  formal  CFG.  The  lower  level  of 
hierarchy  serves  to  rep  resend  top  level  objects  as  a  concatenation  of  lower-level  primitives.  The 
comcatenation  process  is  described  by  a  Markov  process  inspired  by  the  conceptual  ingridients 
of  the  Polygonal  Markov  random  Fields,  (b)  The  lower-level  elementary  units  intract  with  lo¬ 
cal  descriptors  of  the  grey-level  data;  these  descriptors  are  designed  in  terms  of  nonparametric 
statistic  (ranks  and  Smirnov-Kolmogorov  statistics),  (c)  The  combination  of  (a)  and  (b)  leads 
to  a  formulation  of  the  recognition  problem  as  a  global  optimization  problem  which,  in  view 
of  the  recursive  structures,  lends  itself  to  variations  of  Dynamic  Programming  (DP).  The  DP 
involves  a  large  state  space,  and  it  requires  the  maintance  of  a  multitude  of  intermidiate  data 
structures.  This  required  the  development  of  efficient  search  strategies  and  pruning  techniques. 

Deformable  Templates  and~D4g-ital— Anatomy:  The  deformable  tenq.late  methodology 
represents  objects  or  other  complex  global  structures  in  terms  of  prototypes  (templates)  and 
rigid  and/or  elastic-like  deformations  of  the  prototypes.  Computational  engines  have  been  de¬ 
veloped  for  identifying  an  optimal  transformation  that  brings  a  given  template  into  a  target 
image;  the  resulting  image  labeling  can  be  assesed  via  the  image  likelihood,  giving  a  statistically- 
sound  foundation  for  image  analysis,  understanding,  and  interpretation.  The  computational 
algorithms  have  explored  ’’jump-diffusion”  processes,  and  their  implementations  are  hierarchi¬ 
cal,  multi-staged  (multi-grid),  or  use  appropriate  wavelet  expansions. 

The  methodology  of  deformable  templates  has  been  applied  to  a  host  of  applications  [?,  ?,  ?] 
including:  (i)  The  detection  and  recognition  of  subcellular  shapes  (such  as  membrances  and 
mitochondria)  in  electron  migrographs,  (ii)  the  representation  of  the  anatimical  variation  of  the 
geometry  and  ’’shape”  of  2-D  surfaces  in  the  brain-  specifically,  of  the  cortical  and  hippocampal 
surfaces  in  an  ensemble  of  Macaque  monkeys;  (iii)  the  tracking  and  recognition  of  aircrafts,  based 
on  the  fusion  of  narrow-band  radar  (for  detection)  and  high  resolution  radar  (for  recogntion); 
and  (iv)  Digital  anatomy.  Next  we  briefly  describe  (i)  and  (iv). 

(i)  Electron  micrograph  images  exhibit  three  basic  kinds  of  variability:  structure  or  shape 
variability  associated  with  shape  and  scale  variability  of  various  subceUular  structures,  e.g. 
oranelles  and  amoebae;  internal  constituent  variability  of  the  textures  making  up  the  shapes; 
and  complexity  variability  due  to  the  varying  number  of  shapes-the  number  not  known  a  priori. 

The  shape  variability  is  articulated  by  defining  organelle  templates  corresponding  to  fixed 
graphs  with  rigid  regularity  forcing  global  connectivity  of  the  boundary.The  teplates  are  made 
flexible  by  attributing  them  with  geometric  group  operators  (scale,  rotation,  translatin)  resulting 
in  rabber-band  like  transformations  of  the  rigid  templates.  The  textual  variability  and  sensor 
noise  are  accomodated  via  likehhoods  costructed  from  Markov  Random  Fields  models  of  the 
textured  regions.  The  complexity  variability  is  accomodated  via  the  construction  of  a  space 
of  scenes.  A  scene  consists  of  a  number  of  template  shapes  together  with  their  associated 
transformations.  Choosing  a  scene  corresponds  to  choosing  both  the  parameters  determining  the 
shapes  as  well  as  the  model  order  most  representative  of  the  data.  The  computational  algorithms 
involves  the  solution  of  stochastic  partial  differential  equations  (’’diffusion”  equations),  and  have 
been  implemented  on  a  massively  parallel  SIMD  architecture;  they  involve  also  a  discrete  part- 
the  so  called  ”jump”-which  accounts  for  the  variable  number  of  shapes. 

(iv)  Imaging  modalities  such  as  MRI,  CT,  and  PET,  provide  detailed  information  regarding 
the  anatomy  and  physiological  function  of  specific  subjects.  But  the  interpretation  of  the  data 
has  been  hindered  by  the  inability  to  expiditiously  relate  the  information  to  specific  anatomic 
regions-a  problem  central  to  the  Visible  Project  undertaken  by  the  National  Library  of  Medicine. 
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We  developed  algorithms  to  transform  the  morphology  represented  in  atlases  to  observed  in¬ 
stances  of  morphology  as  observed  from  a  particular  imaging  modality  in  a  particular  patient; 
thereby  transmitting  relevant  information  from  atlases  to  a  particular  image  in  clinical  setting. 
This  work  involved  templates  of  low  complexity,  but  designing  templates  for  human  anatomy  is 
a  task  of  orders  of  magnitude  higher. 

Simultaneous  Tracking  and  Recognition:  We  formulated  and  implemented  a  coherent 
framework  for  the  simultaneous  treking  and  recognition  of  moving  objects,  on  the  basis  of 
dynamically  changing  sequences.  The  framework  has  three  basic  components;  a  deformable 
template  representation  of  objects;  dynamical  equations  of  motion  derived  from  Lagrangian 
mechanics;  and  an  observation  model  designed  by  using  nonparametric  image  processing  tech¬ 
niques.  The  last  two  componets  combined  together  give  rise  to  a  HMM  which  is  equivalent  to  a 
non-linear  filtering  problem.  This  problem  is  solved  by  a  new  iterative  algorith  based  on  Monte 
Carlo  sampling  and  statistical  resampling. 

The  moving  objects  may  be  rigid  or  deformable.  In  the  former  case,  shape  variability  in¬ 
volves  changes  in  location,  rotation,  and  scale.  In  the  deformable  case,  variability  involves  both 
global  and  local  deformations.  The  parameters  associated  with  these  deformations  are  viewd 
as  ’’generalized”  coordinates,  and  thier  equations  are  driven  by  random  generalized  forces  and 
torques.  The  framework  has  been  succesfuUy  implemented  on  an  number  of  enviroments  highly 
degrated  by  clutter,  overlap,  and  other  degradations. 

2  Distributed  Networks  and  Resource  Allocation 

Buffer  Management  in  NetworkingiFundamentally,  the  inclusion  of  bursty  traffic,  the  de¬ 
sire  to  achieve  a  cost-effective  network  design,  i.e.  to  obtain  maximum  throughput  in  a  given 
network  while  minimizing  cell  loss,  and  the  limitation  of  maximum  buffer  size,  derived  from 
basic  digital  design  principles,  lends  significant  importance  to  the  issue  of  buffer  management  in 
cell  switching  networks  including  ATM  networks.  The  buffer  management  literature  is  rich  and 
includes  reports  on  improved  network  performance  through  priority  schemes,  fixed  thresholds, 
admission  control,  buffer  partitioning,  fuzzy  thresholds,  fuzzy  rule-based  congestion  and  admis¬ 
sion  control,  fuzzy  policing  mechanisms,  and  a  shared  memory  buffer  for  aU  output  ports  of  a 
switch  subject  to  a  delayed  pushout  scheme.  While  highly  effective,  these  techniques  suffer  from 
two  key  weaknesses.  First,  they  are  susceptible  to  cell  loss  due  to  buffer  overflow.  Second,  the 
performance  reported  for  all  of  these  schemes  have  been  obtained  for  a  single  switch  and,  conse¬ 
quently,  the  results  are  not  necessarily  applicable  to  a  realistic  ceU-switching  network  consisting 
of  multiple  switches.  This  research  presents  a  novel  scheme  -  Guaranteed-No-CeUs-Dropped 
(GNCD),  that  eliminates  cell  loss  due  to  buffer  overflow.  In  this  approach,  the  switching  node 
first  records  the  current  buffer  occupancy  and  then  determines  the  absolute  number  of  empty 
slots.  It  then  admits  from  the  input  cell-burst  from  other  switches  an  exact  number  of  cells 
equal  to  the  number  of  empty  slots.  The  remainder  of  the  cells  are  blocked  at  the  sending 
switch.  The  computation  involved  in  the  decision  to  admit  or  refuse  entry  into  the  buffer  is 
simple  and  fast  -  a  key  advantage  for  high-speed  networks.  Furthermore,  buffer  overflow  is 
eliminated  implying  no  cell  loss  -  a  key  potential  advantage  for  specific  traffic  classes  in  ATM. 
Although  the  fuzzy  thresholding-based  buffer  management  scheme  holds  a  significant  potential, 
according  to  the  literature,  to  effectively  reduce  cell  loss  due  to  buffer  overflow,  GNCD  achieves 
in  eliminating  ceU  loss  due  to  buffer  overflow  completely.  Although  the  fate  of  a  large  fraction 
of  the  blocked  cells,  caused  by  excess  traffic,  is  similar  to  that  in  the  fuzzy  scheme,  it  is  logical 
to  assume  that  the  prevention  of  ceU  loss  due  to  buffer  overflow  manifests  through  increased 
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blocking.  GNCD  includes  an  effort  to  reroute  the  cells,  constituting  the  increased  blocking,  to 
their  eventual  destinations.  Clearly,  these  rerouted  cells  may  incur  delays  and  cause  other  cells 
in  the  network  to  suffer  additional  delays.  Thus,  the  absolute  current  buffer  occupancy  and 
the  size  of  the  incoming  ceU-burst  constitute  the  basis  for  admitting  or  blocking  cells  into  the 
buffer.  The  GNCD  scheme  is  modeled  for  both  (1)  a  single,  stand-alone  switch  to  facilitate  a 
meaningful  comparison  with  other  competing  approaches  in  the  literature,  and  (2)  a  50-switch, 
representative  cell-switching  network  to  study  its  performance  under  realistic  conditions.  Both 
models  are  simulated,  the  first  on  a  uniprocessor  computer  and  the  second  on  a  testbed  con¬ 
sisting  of  a  network  of  25-t-  Pentium  workstations  under  linux,  configured  as  a  loosely-coupled 
parallel  processor.  For  the  simulation  of  model  1,  a  representative  traffic  stimulus,  character¬ 
ized  by  a  two-state,  “on-off”  Markov  Chain  model  and  exponentially  distributed  departures,  is 
utilized.  A  comparative  analysis  of  the  results  reveal  that  the  GNCD  scheme  yields  a  slightly 
higher  throughput  than  the  fuzzy  scheme  while  ensuring  zero  cell  loss  due  to  buffer  overflow, 
over  a  range  of  values  of  input  cell  arrival  rates.  Performance  results  also  indicate  that,  contrary 
to  the  general  expectation  that  large  buffers  will  enhance  throughput  and  mitigate  congestion, 
the  throughput  and  blocking  behavior  of  the  GNCD  scheme  are  unaffected  by  increasing  the 
buffer  capacity  beyond  a  “critical  buffer  size.”  For  the  simulation  of  model  2,  the  input  traffic 
distribution  consists  of  a  total  of  1.0  -  1.5  million  cells  that  are  asserted  into  the  network  for 
each  experiment,  with  the  video  traffic  synthesized  from  an  actual  movie  in  MPEG-1,  the  audio 
traffic  obtained  using  an  ON/OFF  model  utilizing  parameters  extracted  from  an  actual  voice 
segment,  while  the  generator  for  the  data  traffic  utilizes  a  Markov  chain  model,  subject  to  traffic 
shaping.  The  results  corroborate  those  in  model  1  in  that,  even  for  a  large-scale  representa¬ 
tive  cell-switching  network,  the  throughput  is  higher  and  blocking  is  lower  under  GNCD  than 
for  the  fuzzy  thresholding  approach,  over  a  range  of  input  traffic  distributions  corresponding 
to  throughputs  of  73%  to  91%,  although  the  difference  in  the  throughputs  and  blocking  are 
negligibly  small  for  both  low  and  high  values  of  input  cell  arrival  rates.  At  either  extremes 
of  the  input  cell  arrival  rate  values,  the  behaviors  of  both  GNCD  and  fuzzy  thresholding  are 
similar.  However,  while  the  cell  loss  due  to  buffer  overflow  is  nil,  the  average  delay  incurred  by 
the  cells  in  the  network  are  higher  for  GNCD  than  the  fuzzy  approach,  for  the  same  range  of 
input  traffic  distributions,  by  a  factor  ranging  from  1.43  for  relatively  light  input  traffic  density 
to  1.92  for  moderate  input  traffic  to  0.93  for  heavy  traffic.  This  research  notes  that  GNCD 
incurs  less  blocking  than  the  fuzzy  scheme  and  that  the  fuzzy  scheme  incurs  cell  loss  through 
buffer  overflow,  and  argues  conservatively  that  the  cells  lost  through  buffer  overflow  in  the  fuzzy 
scheme  manifest  through  increased  blocking  at  the  sending  switches  and  that  effort  must  be 
expend  to  reroute  them  to  their  respective  destinations.  Under  these  circumstances,  the  average 
delay  incurred  by  the  cells  in  the  network  is  higher  for  GNCD  than  the  fuzzy  scheme  by  a  factor 
ranging  from  2.5  for  relatively  light  input  traffic  density  to  4.72  for  moderate  input  traffic  to  1.6 
for  heavy  traffic. 

Security  on  Demand  in  ATM  Networks:The  traditional,  certification  based  approach  at¬ 
tempts  to  guarantee  the  security  of  a  network  through  risk  analysis  that  involves  the  static 
analysis  of  the  risks,  threats,  resource  availability,  cost,  and  other  parameters.  Certified  net¬ 
works  are  generally  confined  to  a  limited  domain  and,  as  a  result,  they  are  isolated,  costly,  and 
under-utilized.  This  paper  presents  a  fundamental  framework  for  network  security  that  real¬ 
izes  a  unified  and  comprehensive  view  of  security  among  the  civilian,  military,  and  government 
networks.  It  also  offers  a  unique  set  of  principles,  inherent  in  the  framework,  to  enable  the 
realization  of  the  dynamic  risk  assessment  approach  across  the  different  types  of  networks  and 
for  any  type  of  user  -  civilian,  military,  or  government.  The  framework  approach  has  been 
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adopted  by  the  National  Security  Agency  as  the  basis  for  its  Network  Rating  Model.  Under 
dynamic  risk  assessment,  security  is  viewed  a.s  a  resource  and  the  network  security  problem  is 
mapped  into  a  resource  allocation  problem  that  takes  into  consideration,  dynamically,  the  risks, 
threats,  resource  availability,  cost,  and  other  parameters.  Thus,  this  approach  reflects  a  prag¬ 
matic,  cost  effective,  and  best  effort  approach.  It  also  derives  a  part  of  its  momentum  from  the 
increasing  trend  towards  the  merging  of  the  civihan,  military,  and  government  networks.  The 
framework  consists  of  eight  perspectives  and  nine  attributes.  The  perspectives,  termed  piUars  in 
this  paper,  individually  provide  orthogonal  views  of  network  security  and  collectively  constitute 
a  comprehensive  stable  structure  that  supports  the  total  network  security.  The  attributes  refer 
to  the  inherent  characteristics  of  a  secure  network.  While  the  details  of  the  attributes  and  the 
piUars  are  specific  to  the  network  in  question  and  are  likely  to  undergo  evolution  as  the  network 
technology  matures,  the  framework  provides  a  basis  to  address,  fundamentally,  every  weakness 
in  a  given  network.  Furthermore,  it  applies  to  every  level  of  the  network,  starting  at  the  highest 
network  of  networks  level  and  down  to  the  single  computing  node  that  maintains  connections 
with  other  nodes.  Thus,  the  framework  enables  the  understanding  of  the  security  posture  of  an 
individual  network,  in  a  comprehensive  manner,  the  comparative  evaluation  of  the  security  of 
two  or  more  networks,  and  the  determination  of  the  resulting  security  of  a  composite  network 
that  is  formed  from  connecting  two  or  more  networks  with  known  security. 

In  combination  with  the  fundamental  unique  characteristics  of  ATM  networks  namely,  the 
call  setup  process,  the  framework  also  offers  “security  on  demand,”  a  new  paradigm  in  network 
security.  The  proposed  scheme  is  consistent  with  the  basic  characteristics  of  and  is  fundamen¬ 
tally  the  most  logical  approach  to  security  in  ATM  networks.  Unlike  in  data  networks  such  as 
the  Internet,  where  the  actual  nodes  participating  in  routing  a  user’s  message  are  unknown  a 
priori,  in  ATM  networks,  under  caU  setup,  a  virtual  path  for  a  user’s  message  is  determined 
through  negotiation  prior  to  launching  the  traffic.  The  negotiation  generally  includes  the  user 
bandwidth  and  Quality  of  Service  (QoS)  request.  The  principles  underlying  the  framework  en¬ 
able  the  inclusion  of  the  user  requested  security  in  the  dynamic,  negotiation  process.  Thus,  this 
unique,  two-step  process  ensures  that  before  any  user  traffic  is  propagated,  the  entire  path  from 
the  source  to  the  destination  ATM  nodes,  including  every  intermediate  node  and  link,  conforms 
to  the  user  specified  security  requirements.  In  essence,  the  proposed  approach  views  security  as 
a  distributed  network  resource  and  allocates  it  to  each  user  efficiently,  based  on  demand  and 
dictated  by  the  need. 

A  Mathematical  Framework  for  Synthesizing  Distributed  AlgorithmsrFor  many  mili¬ 
tary  and  civilian  large-scale,  real-world  problems  of  interest,  data  is  first  acquired  asynchronously, 
i.e.  at  irregular  intervals  of  time,  at  geographically-dispersed  sites,  processed  utilizing  decision¬ 
making  algorithms,  and  the  processed  data  then  disseminated  to  other  appropriate  sites.  Ex¬ 
amples  include  the  battlefield  where  intelligence  data  is  gathered  from  different  sources  and 
processed  to  yield  decisions  and  the  proposed  intelligent  vehicle  highway  system  where  incident- 
related  data  is  acquired  along  the  highways  to  determine  the  best  routes  for  traffic.  The  tradi¬ 
tional  approach  to  such  problems  consists  of  designing  a  central  entity  which  collects  all  data 
and  executes  a  decision  making  algorithm  sequentially  to  yield  the  decisions.  Centralized  de¬ 
cision  making  algorithms  are  slow  and  highly  vulnerable  to  natural  and  artificial  catastrophes. 
Recent  literature  contains  proposals  for  asynchronous,  distributed,  decision  making  algorithms 
wherein  local  decision  making  at  every  site  replaces  the  centralized  decision  making  to  achieve 
faster  response,  higher  rehability,  and  greater  accuracy  of  the  decisions.  Two  key  issues  with 
asynchronous,  distributed,  decision  making  algorithms  include  the  lack  of  a  suitable  mechanism 
to  synthesize  them  for  any  given  problem  and  a  comparative  analysis  of  the  quality  of  their 
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decisions. 

This  paper  proposes  a  mathematical  framework,  MFAD,  based  on  the  Kohn-Nerode  dis¬ 
tributed  hybrid  control  paradigm,  to  describe  a  centralized  decision-making  algorithm  and  to 
synthesize  from  it  a  distributed  decision-making  algorithm.  Ideally,  the  centralized  control  gath¬ 
ers  all  data  from  all  entities  in  the  system  and  utilizes  them  to  arrive  at  the  decisions  and,  as  a 
result,  the  decisions  are  expected  to  be  “globally”  optimal.  In  truth,  however,  as  the  frequency 
of  the  sensor  data  increases  and  the  environment  gets  larger,  dynamic,  and  more  complex, 
the  decisions  come  into  question.  In  the  distributed  decision-making  system,  the  centralized 
decision-making  is  replaced  by  those  of  the  constituent  entities  that  aim  at  minimizing  a  La- 
grangian,  i.e.  a  local,  non-negative  cost  criterion,  subject  to  the  constraints  imposed  by  the 
global  goal.  Thus,  computations  are  carried  out  locally,  utilizing  locally  obtained  data  and  ap¬ 
propriate  information  that  is  propagated  from  other  sites.  It  is  hypothesized  that  with  each 
entity  engaged  in  optimizing  its  individual  behavior,  asynchronously,  concurrently,  and  inde¬ 
pendent  of  other  entities,  the  distributed  system  will  achieve  “global”  optimal  behavior.  The 
distributed  system  is  also  expected  to  be  more  efficient,  robust,  and  exhibit  scalability.  While 
it  does  not  claim  that  decentralized  systems  may  be  synthesized  for  aU  centralized  real-world 
systems,  this  paper  implements  both  the  centralized  and  distributed  paradigms  for  a  representa¬ 
tive  military  battlefield  command,  control,  and  communication  (C^)  problem.  It  also  simulates 
them  on  a  testbed  of  network  of  workstations  for  a  comparative  performance  evaluation  of  the 
centralized  and  decentralized  paradigms  in  the  MFAD  framework.  Performance  results  indicate 
that  the  decentralized  approach  consistently  outperforms  the  centralized  approach.  The  paper 
aims  at  developing  a  quantitative  evaluation  of  the  quality  of  decisions  under  the  decentralized 
paradigm  and,  to  achieve  this  goal,  it  introduces  a  fundamental  concept,  embodied  through  a 
hypothetical  entity  termed  “Perfect  Global  Optimization  Device  (PGOD),”  that  generates  per¬ 
fect  or  ideal  decisions.  PGOD  possesses  perfect  knowledge,  i.e.  the  state  information  of  every 
entity  of  the  entire  system  unaffected  by  time  and  delay,  at  all  times.  PGOD  utilizes  the  same 
decision-making  algorithm  as  the  centralized  paradigm  and  generates  perfect  globaUy-optimal 
decisions  which,  though  unattainable,  provide  a  fundamental  and  absolute  basis  for  comparing 
the  quality  of  decisions.  Simulation  results  reveal  that  the  quality  of  decisions  in  the  decen¬ 
tralized  paradigm  are  superior  to  those  of  the  centralized  approach  and  that  they  closely  track 
PGOD’s  decisions. 
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